Red Hat Security Advisory: php:7.4 security update

CVE-2024-8929 — php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-11233 — php: Single byte overread with convert.quoted-printable-decode filter CVE-2024-11234 — php: Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2025-1217 — php: Header parser of http stream wrapper does not handle folded headers CVE-2025-1219 — php: libxml streams use wrong content-type header when requesting a redirected resource CVE-2025-1220 — php: PHP Hostname Null Character Vulnerability CVE-2025-1734 — php: Streams HTTP wrapper does not fail for headers with invalid name and no colon CVE-2025-1735 — php: pgsql extension does not check for errors during escaping CVE-2025-1736 — php: Stream HTTP wrapper header check might omit basic auth header CVE-2025-1861 — php: Stream HTTP wrapper truncates redirect location to 1024 bytes CVE-2025-6491 — php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-14177 — php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images CVE-2025-14178 — php: heap-based buffer overflow in array_merge()